Designing and Developing Secure Azure Solutions

This book provides practical tutorials and design references for building secure Azure applications and workloads, covering immediate security challenges, integrating multiple Azure security technologies, and optimizing security throughout the development lifecycle.

Format: Paperback / softback
Length: 528 pages
Publication date: 30 January 2023
Publisher: Pearson Education (US)

As businesses migrate their critical applications and workloads to the Microsoft Azure cloud, they face a growing array of sophisticated threats. To ensure the security and resilience of these assets, it is essential to incorporate robust security measures into the design, development, and maintenance processes. This comprehensive guide, written by a team of renowned Azure security experts, provides practical insights and best practices for building secure Azure applications and workloads.

The authors begin by emphasizing the importance of integrating security throughout the entire development lifecycle. They highlight the need for a comprehensive approach that encompasses threat modeling, vulnerability assessment, and continuous monitoring. They also emphasize the importance of using proven security best practices, such as implementing strong authentication, encryption, and access control mechanisms.

Throughout the book, the authors present a step-by-step tutorial that covers various aspects of Azure security. They discuss how to improve the security of applications and workloads by reducing attack surfaces, implementing zero trust principles, and leveraging advanced identity solutions. They also provide guidance on modeling threats early, implementing effective mitigations, and leveraging Azure monitoring, logging, and Kusto queries to enhance security posture.

In addition to the technical aspects, the book also covers secure coding principles, defensive coding techniques, and testing code security. The authors emphasize the importance of writing secure code, fixing vulnerabilities, and conducting regular security assessments. They also discuss the use of Azure cryptography and confidential computing technologies to protect sensitive data.

Understanding compliance and risk programs is another critical aspect of Azure security. The authors provide insights into Azure's compliance offerings, such as ISO 27001, SOC 2, and PCI DSS, and help organizations assess their compliance posture and implement appropriate controls.

The book also covers the security of CI/CD automated workflows and pipelines. The authors discuss how to secure build processes, automate vulnerability scanning, and implement security measures to protect sensitive data during deployment.

In conclusion, this comprehensive guide is a valuable resource for anyone who wants to build secure Azure applications and workloads. It provides practical insights, best practices, and tutorials that cover a wide range of security topics. Whether you are a developer, architect, or security professional, this book will help you enhance the security of your Azure assets and protect against emerging threats.

Weight: 871g
Dimension: 232 x 188 x 30 (mm)
ISBN-13: 9780137908752